Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2133a9e1-9f3c-4662-b3c3-5cea0c9406cc.roa
File: 2133a9e1-9f3c-4662-b3c3-5cea0c9406cc.roa (raw, json)
Hash identifier: D5DwuTlw2g0ApUJDkr51/kUex0pCjy1G2/OmpNHZUik=
Subject key identifier: DE:8B:E4:11:E3:F7:9D:B4:91:F0:FB:E4:82:9B:37:B2:AF:BC:21:5A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0C3B0E8D9E1A2D94BB044E24E20050DCD6AD8AF7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2133a9e1-9f3c-4662-b3c3-5cea0c9406cc.roa
Signing time: Wed 05 Mar 2025 17:01:18 +0000
ROA not before: Wed 05 Mar 2025 17:01:18 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:9080::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:3b:0e:8d:9e:1a:2d:94:bb:04:4e:24:e2:00:50:dc:d6:ad:8a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 17:01:18 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d0:09:19:0b:54:58:2a:be:5e:bf:14:da:f7:
13:2e:b3:f1:ff:33:19:a9:46:65:2c:2e:7b:ff:1d:
93:59:30:d7:c5:76:80:60:75:d4:24:04:9b:40:df:
a2:1f:13:d7:15:db:79:5f:7d:46:15:9a:22:01:0d:
21:66:69:eb:53:af:ad:b1:c1:1b:01:dc:d0:c7:e5:
be:b1:f0:e6:68:1a:7a:0b:ea:54:45:f8:06:71:98:
30:ef:f9:90:df:2c:e9:d5:51:57:20:de:c5:3f:e7:
72:97:cd:66:70:17:ee:6d:8a:3e:d6:db:fe:77:52:
0a:c9:57:48:97:84:0a:a2:7f:ab:0d:32:43:c2:90:
a4:30:c2:4c:6d:0d:26:08:e7:e3:b6:9d:3b:8a:8a:
2b:53:1e:84:1c:be:f1:f5:0f:d5:d3:e9:75:a0:89:
2d:db:6f:50:4a:79:4c:d9:86:fe:b5:2c:d8:ab:b0:
c6:08:85:50:a5:6b:b5:3f:17:2d:24:80:cd:fa:53:
8b:35:8c:b8:62:8c:c4:c2:83:48:a4:c4:8e:40:51:
e8:93:a8:53:72:33:b3:e4:16:4d:e9:1a:04:24:da:
e9:ae:1b:69:72:3a:ea:3e:2e:f4:c9:aa:37:fd:2b:
3d:63:a7:a3:a9:ce:f1:c9:e3:e7:d0:f4:77:fd:0d:
d9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:8B:E4:11:E3:F7:9D:B4:91:F0:FB:E4:82:9B:37:B2:AF:BC:21:5A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2133a9e1-9f3c-4662-b3c3-5cea0c9406cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:9080::/46
Signature Algorithm: sha256WithRSAEncryption
62:00:0b:f3:d5:9f:07:23:51:78:f8:1b:32:0e:6b:74:8f:8a:
91:8b:54:35:ed:66:8d:a7:9e:ee:03:6f:82:2b:bc:e0:7a:11:
df:83:13:49:8a:30:69:dc:39:d4:19:ae:4b:95:e1:b9:37:89:
10:e5:44:da:ee:25:7d:2e:91:aa:0b:e6:ff:48:75:fd:0c:61:
e5:43:e7:86:8d:5d:a3:f7:79:5c:fe:bc:49:0b:6c:e5:1f:66:
c0:16:49:03:fd:73:3b:48:25:f6:da:5e:39:20:bf:98:ad:4f:
8f:31:5f:c6:90:4d:22:06:a1:26:d2:11:4e:10:af:6e:be:51:
84:ad:55:9f:b6:c9:43:10:97:09:d1:a8:3e:31:fb:e3:bb:29:
4b:1c:b8:62:3e:08:ce:f8:eb:4c:3b:53:ca:e0:8f:4e:a3:72:
0d:16:49:fa:a5:de:71:28:6a:17:c5:d3:df:ce:68:70:0b:dc:
84:0b:97:60:ce:09:81:03:54:24:45:6c:d2:e9:24:07:90:fa:
35:16:ff:fe:40:42:ff:55:c0:a7:66:a8:13:eb:dd:00:6d:ef:
54:24:04:53:4b:4f:b8:17:c4:fa:a8:17:ea:c9:27:de:e9:d2:
71:84:9d:62:1e:62:07:3d:5b:5a:18:8d:fd:58:41:8b:ba:69:
3a:fc:cb:b9
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUDDsOjZ4aLZS7BE4k4gBQ3NativcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAzMDUxNzAxMThaFw0yNTA0MDkyMzU5NTlaMHoxSTBHBgNV
BAUTQGQxMTdmOWI5NTI1NjcyMWNkNTFiYmQ3ODNiMzhkNWMxYjVmNmIyZTM0MzJi
YjRjODU5Zjc2MmQ4YjE3YjZkOWYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJnQCRkLVFgqvl6/FNr3Ey6z8f8zGalGZSwue/8dk1kw18V2gGB11CQEm0Df
oh8T1xXbeV99RhWaIgENIWZp61OvrbHBGwHc0MflvrHw5mgaegvqVEX4BnGYMO/5
kN8s6dVRVyDexT/ncpfNZnAX7m2KPtbb/ndSCslXSJeECqJ/qw0yQ8KQpDDCTG0N
Jgjn47adO4qKK1MehBy+8fUP1dPpdaCJLdtvUEp5TNmG/rUs2KuwxgiFUKVrtT8X
LSSAzfpTizWMuGKMxMKDSKTEjkBR6JOoU3Izs+QWTekaBCTa6a4baXI66j4u9Mmq
N/0rPWOno6nO8cnj59D0d/0N2V8CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTei+QR
4/edtJHw++SCmzeyr7whWjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MjEzM2E5ZTEtOWYzYy00NjYyLWIzYzMtNWNlYTBjOTQwNmNjLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0DWQ
gDANBgkqhkiG9w0BAQsFAAOCAQEAYgAL89WfByNRePgbMg5rdI+KkYtUNe1mjaee
7gNvgiu84HoR34MTSYowadw51BmuS5XhuTeJEOVE2u4lfS6Rqgvm/0h1/Qxh5UPn
ho1do/d5XP68SQts5R9mwBZJA/1zO0gl9tpeOSC/mK1PjzFfxpBNIgahJtIRThCv
br5RhK1Vn7bJQxCXCdGoPjH747spSxy4Yj4IzvjrTDtTyuCPTqNyDRZJ+qXecShq
F8XT385ocAvchAuXYM4JgQNUJEVs0ukkB5D6NRb//kBC/1XAp2aoE+vdAG3vVCQE
U0tPuBfE+qgX6skn3unScYSdYh5iBz1bWhiN/VhBi7ppOvzLuQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:25 2025 by rpki-client